How to Buy
This script is Copyright (C) 2010-2017 Tenable Network Security, Inc.
The remote web server may be prone to HTML injections.
The remote web server hosts CGI scripts that fail to adequately sanitize
an attacker may be able to cause arbitrary HTML to be executed in a
user's browser within the security context of the affected site.
The remote web server may be vulnerable to IFRAME injections or
cross-site scripting attacks :
- IFRAME injections allow 'virtual defacement' that
might scare or anger gullible users. Such injections
are sometimes implemented for 'phishing' attacks.
- XSS are extensively tested by four other scripts.
- Some applications (e.g. web forums) authorize a subset
of HTML without any ill effect. In this case, ignore
See also :
Either restrict access to the vulnerable application or contact the
vendor for an update.
Risk factor :
Medium / CVSS Base Score : 4.3
Family: CGI abuses : XSS
Nessus Plugin ID: 49067 ()
Nessus Professional: Scan unlimited IPs, run compliance checks & moreNessus Cloud: The power of Nessus for teams – from the cloud
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.